Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Xn7lzQQEsAw-Oev-mFXetH6Av08.roa
File: Xn7lzQQEsAw-Oev-mFXetH6Av08.roa (raw, json)
Hash identifier: unJ6hBFWM9p7QP7WAdrlTI4ZXAH5Hq8p2sus5H5Gwsk=
Subject key identifier: 5E:7E:E5:CD:04:04:B0:0C:3E:39:EB:FE:98:55:DE:B4:7E:80:BF:4F
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01903D91F70D7C6537E0AE5697126DC91E39
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Xn7lzQQEsAw-Oev-mFXetH6Av08.roa
Signing time: Sat 22 Jun 2024 01:31:34 +0000
ROA not before: Sat 22 Jun 2024 01:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 5.35.192.0/21 maxlen: 24
85.204.160.0/22 maxlen: 24
86.107.108.0/23 maxlen: 24
89.34.124.0/23 maxlen: 24
89.39.172.0/23 maxlen: 24
193.124.20.0/23 maxlen: 24
194.88.96.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 00:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3d:91:f7:0d:7c:65:37:e0:ae:56:97:12:6d:c9:1e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jun 22 01:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e7ee5cd0404b00c3e39ebfe9855deb47e80bf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:94:25:d3:be:61:51:95:38:0c:44:a5:fc:
71:47:48:ce:9b:34:b7:40:2a:44:08:06:35:eb:ab:
a0:5d:47:37:0e:f4:6e:92:cb:44:a5:b5:dc:c9:9a:
19:c6:9f:8a:a9:c3:3e:91:c1:71:d8:20:63:d3:76:
b6:fa:a8:24:41:b7:36:22:e0:f5:30:69:12:35:b7:
5d:f5:1c:a6:1e:d4:63:23:f3:b3:bd:c8:44:cc:56:
35:53:81:03:16:ea:69:0f:59:bc:49:8f:dd:0b:c6:
14:cd:b4:aa:46:72:5a:ee:f6:ac:14:cd:5f:01:96:
09:57:4e:9c:cd:94:e1:1d:4d:33:f9:37:34:af:bd:
15:fe:7c:76:07:1c:1d:58:c2:c0:03:54:35:ea:b5:
28:e1:80:fb:87:59:b4:ab:b5:16:05:4b:be:19:c3:
5f:4c:02:1e:b9:3c:09:d7:33:bd:ce:12:b9:4d:ca:
b7:09:fe:8c:03:9e:39:96:58:1b:f2:24:30:d3:d7:
67:25:06:fb:35:64:32:42:96:12:a1:cb:e7:c6:74:
1f:97:e7:c9:3a:4e:23:19:7f:af:fc:ca:0b:a8:f1:
bd:a8:2f:50:44:bf:88:12:46:ab:2a:5b:28:07:45:
76:1e:b6:75:ac:e8:79:4c:dc:8d:e0:c2:ef:31:eb:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7E:E5:CD:04:04:B0:0C:3E:39:EB:FE:98:55:DE:B4:7E:80:BF:4F
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/Xn7lzQQEsAw-Oev-mFXetH6Av08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.192.0/21
85.204.160.0/22
86.107.108.0/23
89.34.124.0/23
89.39.172.0/23
193.124.20.0/23
194.88.96.0/21
Signature Algorithm: sha256WithRSAEncryption
88:dd:41:1c:58:aa:5b:bb:e0:bc:75:bb:fe:fa:b7:8b:22:0f:
a5:d5:b2:e6:26:e0:ee:ed:51:4c:09:69:82:ed:38:8d:b3:27:
39:58:b7:e3:c9:1c:00:4b:59:9d:1b:49:88:90:c1:d1:52:84:
c8:7f:98:97:05:1a:a5:4b:40:0d:fc:47:c6:a1:97:86:c2:78:
b8:ad:e7:dc:bd:f7:59:28:0c:0d:ad:7c:b7:52:78:5b:e4:f6:
a5:b6:fb:f1:1f:ef:0c:96:a4:2d:a9:08:d7:00:11:39:b1:17:
4f:8d:9e:29:24:9e:1b:ae:19:3d:c2:40:3e:5b:22:06:e0:28:
6a:0c:56:f6:12:99:11:89:d9:32:95:3c:ac:8b:61:88:e0:2d:
22:96:bb:4b:7e:3a:de:65:a0:9d:98:29:d7:68:c5:bc:92:58:
45:74:8e:aa:26:75:9e:38:72:74:bf:84:89:70:15:ef:b0:f9:
bd:36:8f:90:7e:d8:de:2b:0a:d7:53:4c:fc:bb:73:af:9a:f2:
ec:52:e0:79:0e:3e:cf:4a:81:aa:18:1b:aa:03:73:bb:62:83:
9b:da:26:ac:a0:1b:9d:fc:fa:b8:7e:13:67:57:77:5f:46:f1:
12:13:bf:c6:76:57:ba:c1:44:6a:df:53:e6:68:04:b8:42:da:
87:b8:f6:4b
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZA9kfcNfGU34K5WlxJtyR45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjQwNjIyMDEzMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTdlZTVjZDA0MDRiMDBjM2UzOWViZmU5ODU1ZGViNDdlODBiZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2eUJdO+YVGVOAxEpfxxR0jOmzS3
QCpECAY166ugXUc3DvRukstEpbXcyZoZxp+KqcM+kcFx2CBj03a2+qgkQbc2IuD1
MGkSNbdd9RymHtRjI/OzvchEzFY1U4EDFuppD1m8SY/dC8YUzbSqRnJa7vasFM1f
AZYJV06czZThHU0z+Tc0r70V/nx2BxwdWMLAA1Q16rUo4YD7h1m0q7UWBUu+GcNf
TAIeuTwJ1zO9zhK5Tcq3Cf6MA545llgb8iQw09dnJQb7NWQyQpYSocvnxnQfl+fJ
Ok4jGX+v/MoLqPG9qC9QRL+IEkarKlsoB0V2HrZ1rOh5TNyN4MLvMeu5GwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFF5+5c0EBLAMPjnr/phV3rR+gL9PMB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvWG43bHpRUUVzQXctT2V2LW1GWGV0SDZBdjA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDBSPAAwQC
VcygAwQBVmtsAwQBWSJ8AwQBWSesAwQBwXwUAwQDwlhgMA0GCSqGSIb3DQEBCwUA
A4IBAQCI3UEcWKpbu+C8dbv++reLIg+l1bLmJuDu7VFMCWmC7TiNsyc5WLfjyRwA
S1mdG0mIkMHRUoTIf5iXBRqlS0AN/EfGoZeGwni4refcvfdZKAwNrXy3Unhb5Pal
tvvxH+8MlqQtqQjXABE5sRdPjZ4pJJ4brhk9wkA+WyIG4ChqDFb2EpkRidkylTys
i2GI4C0ilrtLfjreZaCdmCnXaMW8klhFdI6qJnWeOHJ0v4SJcBXvsPm9No+Qftje
KwrXU0z8u3OvmvLsUuB5Dj7PSoGqGBuqA3O7YoOb2iasoBud/Pq4fhNnV3dfRvES
E7/Gdle6wURq31PmaAS4QtqHuPZL
-----END CERTIFICATE-----
Generated at Fri Aug 2 03:36:56 2024 by rpki-client on console-fra.rpki-client.org